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AMENDMENTS TO THE CLAIMS 

1. (currently amended) A method for synchronizing a cipheriag key change in a 
wireless communications system^ the wireless communications system 
5 comprising: 

a first station capable of receiving a security mode command to effect a 
ciphering change, and capable of receiving encrypted layer 2 protocol data 
units (PDUs), each received PDU being sequentially identified by an n-bit 
frame number (FN), the first station comprising: 
10 a first m - bit hyper fromo number (HFN )j-afld 

a decryption unit capable of decrypting received PDUs according to at 
least a first ciphering key, the^a firs t m-bit hvper frame mim ber rUFN^ 
which is a function of the FN for each received PDU- tffN. and the 
FN of each received PDU; and 
15 a second station capable of transmitting the security mode command, capable 

of assign mg each transmitted PDU with an n-bit FN and capable of 
transmitting encrypted PDUs^ the second station comprising: 
a-se cond m bit HFN; and 

an encryption unit capable of encrypting transmitted PDUs according to 
20 at least the first ciphering key, tibte-a^second m-bit HF N which is a 

function of the FN for each transmitted PDU. and an FN associated 
with each transmitted PDU; 
the method comprising: 

the second station determining an activation time at which a ciphering key 
25 change is to occur; 

the second station composing the security mode command, the security mode 
command comprising a switching FN corresponding to the activation time, 
and X least-significant bits (LSBs) from the second HFN corresponding to 
the activation time; 
30 the second station transmitting the security mode command; 

the first station receiving the security mode command; 

the fii^t station utilizing the switching EN and the x LSBs from the second 
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HFN contained in the security mode conunand to obtain an application time; 
and 

the first station using the jRrst ciphering key to decrypt PDUs with ENs 
sequentially prior to the application time, and using a second ciphering key 
5 to decrjrpt PDUs with ENs sequentially on or after the application time^ 

wherein the second ciphering key is dijfferent from the jSrst ciphering key . 

2. (original) The method of claim 1 wherein the first station increments the first 
HFN by a predetermined value on detection of roll-over of an FN of a received 

10 PDU, 

3. (original) The method of claim 1 wherein the second station increxaents the 
second HFN by a predetermined value on detection of roll-over of an jFN of a 
transmitted PDU. 

15 

4. (original) The method of claim 1 wherein the first HFN and the second HFN ate 
synchronized, 

5. (original) The method of claim 4 wherein the activation time corresponds to a 
20 second HFN/FN sequence pair for a crossover PDU, the crossover PDU being the 

sequeutiaUy earliest PDU encrypted using the second ciphering key, and the 
application time corresponds to a synchronized first HFN/FN sequence pair for a 
corresponding received PDU. 

25 6. (original) The method of claim 5 wherein the switching FN is the FN of the 
crossover PDU, and the x LSBs are extracted from the second HFN 
corresponding to the crossover PDU. 

7. (original) The method of claim 1 wherein the activation time is equal to the 
30 application time. 

8. (original) The method of claim 1 wherein x is greater than or equal to 2, 
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9. (original) The method of claim 1 wherein x is equal to m. 

10, (original) The method of claim 1 wherein the first station compares the x LSBs 
5 from the second HFN contained in the security mode command to determine a 

cyclical positioning of the switching FN within the jSrst HFN, 



11. (currently amended) A wireless conomunications system comprising: 

a first station capable of receiving encrypted layer 2 protocol data units (PDUs), 
10 and capable of receiving a security mode command, the first station 

comprising: 

a receiving buffer for storing received PDUsm,]] 

a means for th e first station assocjating a sequentially ordered n-bit 
frame numbers (FN) for each received FPU bv the first station: a nd 
15 a means for maintaining an m-bit hyper frame numbers (HFN) as a 

function of the associated FN for w itib-each received FP U bv the jSrst 
station : 

an extraction unit for obtaining an application time from a switching FN 
and X least significant bits (LSBs) of a second HFN, the switching 
20 FN and the x LSBs of the second HFN bejng^contained in the 

security mode command; 

a means for storing a first ciphering key; 

a means for storing a second ciphering kev . which is different from the 
first ciphering key: and 

25 a decryption unit for decrypting the received FPUs, the decryption unit using 

the jBrst ciphering key to decrypt any received PDU with an HFN/FN pair 
that is sequentially before the application lime^ and using the second 
ciphering key to decrypt any received FPU with an HFN/FN pair that is 
sequentially on or after the application time. 

30 

12. (original) The system of claim 11 further comprising a second station capable of 
transmitting the secvuity mode command, and capable of transmitting the 
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encrypted PDUs; wherein PDU$ that are sequentially before the application time 
are encrypted using the first ciphermg key, and PDUs sequentially on or after the 
application time are encrypted using the second ciphering key, 

5 13. (original) The systerp of claim 12 wherein the HFN of each received PDU is 
synchronized with a corresponding HFN on the second station for each PDU 
transmitted by the second station. 

14. (original) The system of claim 13 wherein the second station comprises an 
10 encryption unit capable of generating an activation time, the activation time 

corresponding to an HFN/FN sequence pair for a crossover PDU, the crossover 
PDU being the sequentially earliest PDU encrypted by the encryption unit using 
the second ciphering key, and the application time corresponds to a synchronized 
HFN/FN sequence pair for a corresponding PDU received by the first station. 

15 

15- (original) The system of claim 14 wherein the switching FN is the FN of the 
crossover PDU, and the second HFN is the HFN of the crossover PDU. 

16. (original) The system of claim 14 wherein the activation time is equal to the 
20 application time. 

17. (original) The system of claim 11 wherein the first station increments the HFN 
associated with a first PDU by a predetermined value on rollover of the FN 
associated with the first PDU. 

25 

18. (original) The system of claim 11 wherein x is greater than or equal to 2. 

19. (original) The system of claim 11 wherein x is equal to m. 
30 20. (cancelled) 

21. (cancelled) 
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22. (cancelled) 

23. (cauceUed) 

24. (cancelled) 



25- (ciutxently amended) A method for removitxg cyclical ambiguity of an n-bit 
identifying firame number (FN) transmitted in a signaling message from a first 
station to a second station in a wireless communications system, the identifying 
FN identifying a layor 2 pTotocol data unit (FPU) in a atroam of FDUa, tho first 
s tation comprising q first m bit hyper frame number (HFN) that is incrcmontod by 
a first value upon d e tection of roll over of an FN in tho otream of PDUc, oach 
FPU in the otroam of FPUs having an associated FN value and each FN value 
15 having an agoociated HFN valu erthe method comprising: 

the first station placing 4he-an identifying FN for identifying a layer 2 
protocol d ata unit (FDLH in a stream of transmitted PDTJs. into a first 
field of a message; 

the first station placing x least significant bits (LSBs) from tbe -a first m-bit 
20 hyper frame number TH FN;^ value associated with the identifying FN in a 

second field of the messag e, the first HFN bein^ incremented bv a first 
value upon detection of roU-over of an FN in the stream of transmitted 
fPy^; and 

the first station transmitting the message to the second station; 
25 wherein aft e r rec e ption of the m e ssag e , t he second station receiving the 

message and « ses -u$ing t he x LSBs of the second field to detennine a 
cyclical position of the identifying F N of the first field: 
wherein x<m > 

30 26. (original) The method of claim 25 wherein x is greater than or equal to two. 

27, (currently amended) The method of claim 25 wherein the second station has a 
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second HFN that is synchronized with the HFN of the first station, _the second 
HFN being incremented bv the first value upoB detection of roll-over of an FN in 
the stream of received FPUs and the second station uses the x LSBs of the second 
field to determine the cyclical position of the identifying FN within the second 
HFN. 

28. (new) The method of claim 1 wherein x is equal to 2, 

29. (new) The method of claim 1 wherein x is less than m. 

30- (new) The method of claim 11 wherein x is equal to 2. 

31- (new) The method of claim 11 wherein x is less than m- 
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